CVE-2002-0392: High severity apache http server vulnerability
Apache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a chunk-encoded HTTP request that causes Apache to use an incorrect size.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0392?
CVE-2002-0392 is classified as a high severity vulnerability due to its potential to cause denial of service and arbitrary code execution.
How do I fix CVE-2002-0392?
To fix CVE-2002-0392, you should update to a patched version of Apache HTTP Server beyond 1.3.24 or 2.0.36.
What software versions are affected by CVE-2002-0392?
CVE-2002-0392 affects Apache 1.3 through 1.3.24 and Apache 2.0 through 2.0.36.
What could an attacker achieve by exploiting CVE-2002-0392?
An attacker exploiting CVE-2002-0392 could cause a denial of service or potentially execute arbitrary code on the server.
Is there a workaround for CVE-2002-0392?
There are no known effective workarounds for CVE-2002-0392 aside from upgrading to a secure version.